One-shot full-stack apps with your existing AI coding tool. Puter.js gives you Auth, Storage, DB, AI & more, with up to 90% fewer AI tokens than other backend platforms. Learn more →
Top 16 TypeScript llm-security Projects
-
ClawHub + SecureClaw. Install SecureClaw first, then use it to audit everything else.
-
Puter.js
Puter.js - The Backend for AI-Generated Apps. One-shot full-stack apps with your existing AI coding tool. Puter.js gives you Auth, Storage, DB, AI & more, with up to 90% fewer AI tokens than other backend platforms.
-
agent-threat-rules
Open detection standard -- like Sigma, but for AI agents. 425 rules, shipped in Microsoft AGT, Cisco AI Defense, MISP, OWASP A-S-R-H. 97.1% recall on NVIDIA garak. NIST OSCAL Path 1.
Project mention: I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found. | dev.to | 2026-03-22Everything is open source (MIT): ATR rules + PanGuard scanner
-
Project mention: Stop Sending Your .env to OpenAI: A Privacy Layer for OpenCode | dev.to | 2026-03-24
And it isn't destructive. Unlike regex scrubbing for analytics pipelines, this is fully reversible. Your data is abstracted during transit and restored for local execution. Nothing is lost (that's the whole point of Rehydra).
-
panguard-ai
Open-source security platform for AI agents -- audits skills before install, monitors 24/7, shares threat intelligence across all users. | AI Agent 開源安全平台 -- 安裝前審計 skill、24/7 即時監控、社群共享威脅情報。
Project mention: I Scanned 2,386 MCP Packages on npm. 402 Were Critical. Here's What I Found. | dev.to | 2026-03-22Everything is open source (MIT): ATR rules + PanGuard scanner
-
lelu
Open source authorization engine for AI agents. Confidence-aware gating · Human-in-the-loop review · Policy-as-code · Full audit trail (by Lelu-ai)
Project mention: Show HN: Lelu – gate OpenAI agent actions on confidence and prompt injection | news.ycombinator.com | 2026-06-24 -
agentshield-benchmark
Open benchmark for AI agent security tools — prompt injection, data exfiltration, tool abuse, provenance
Project mention: GentShield – Open benchmark of 6 AI agent security tools (537 test cases) | news.ycombinator.com | 2026-02-15 -
SupraWall
The open-source security layer for AI agents. Deterministic guardrails, PII redaction, and EU AI Act compliance in one line of code.
Website: https://supra-wall.com
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
PROMPTPurify
Prompt-injection guardrail for LLM applications. Compact model that outperforms larger open-source guards. No regex, no signatures. Demo: anton.securelayer7.net
Project mention: PROMPTPurify: MB CPU-only prompt-injection guard (benchmarked vs. OSS guard) | news.ycombinator.com | 2026-05-29 -
aeneassoft
The Proxy-Free Safe Pause & Resume Layer for AI Agents. In-process circuit breaker. 2 lines of code. Patent pending.
Project mention: In-process circuit breaker that kills runaway AI agents before they go rogue | news.ycombinator.com | 2026-03-31 -
attestor
Discontinued Zero Trust Execution Boundary. [Moved to: https://github.com/Open-AGS/attestor]
-
Project mention: Why Pattern-Matching Scanners Miss Structural Bugs (and What I Built Instead) | dev.to | 2026-04-22
I built mythos-agent, an open-source AI code reviewer (MIT, TypeScript, GitHub), to layer an LLM-based hypothesis stage on top of a traditional SAST foundation. This post is the technical writeup: what the pipeline looks like, what bug classes it surfaces that regex-only scanners miss, and where it still gets things wrong.
-
-
keynv
Self-host secrets manager with an AI-safety layer. Aliases instead of values; AI agents never see real credentials. Cloud option coming.
Project mention: I scanned my own laptop for leaked secrets and found 62,311 of them | dev.to | 2026-07-01Repo: https://github.com/keynv-labs/keynv
-
mcpcustoms
MCPCustoms is the customs checkpoint for MCP tool calls: a zero-dependency TypeScript runtime semantic firewall that inspects every Massive Intelligence (IM) agent tool call before execution. Detects tool poisoning, command/SQL/prompt injection, path traversal, and capability overreach; verifies signed Ed25519 publishers; fail-closed by default.
Project mention: These tools provide the engineering substrate required to meet the rigorous safety and economic constraints of production environments. | dev.to | 2026-06-28 -
diplomat-agent-ts
What can your TypeScript AI agent do to the real world? Scan your code. See which tool calls have zero checks
Project mention: Show HN: Scan your AI agent's code for tool calls with no checks | news.ycombinator.com | 2026-05-28 -
mcp-security-scanner
Scans Model Context Protocol (MCP) server configurations for common security issues: overprivileged tools, missing auth, prompt injection surface, unsafe defaults.
Project mention: Your MCP Server Is Probably Overprivileged - Here's a Scanner For It | dev.to | 2026-05-22Source: github.com/hailbytes/mcp-security-scanner — MIT licensed. Pairs nicely with @hailbytes/mcp-server-template if you want a scaffold that comes up secure by default.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
TypeScript llm-security discussion
TypeScript llm-security related posts
-
System prompts are not a security boundary for AI agents
-
Show HN: Enforra – open-source action governance for AI agent tool calls
-
How to manage multi-user AI agent authentication and authorization in 2026 (OAuth 2.1, OIDC, and delegated access)
-
Stop Sending Your .env to OpenAI: A Privacy Layer for OpenCode
-
GentShield – Open benchmark of 6 AI agent security tools (537 test cases)
-
Semantic Redaction: Why Context Matters for Privacy in AI
-
A note from our sponsor - Puter.js
developer.puter.com | 21 Jul 2026
Index
What are some of the best open-source llm-security projects in TypeScript? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | secureclaw | 348 |
| 2 | agent-threat-rules | 312 |
| 3 | rehydra-sdk | 77 |
| 4 | panguard-ai | 52 |
| 5 | lelu | 43 |
| 6 | agentshield-benchmark | 24 |
| 7 | SupraWall | 22 |
| 8 | PROMPTPurify | 17 |
| 9 | aeneassoft | 6 |
| 10 | attestor | 6 |
| 11 | mythos-agent | 5 |
| 12 | enforra | 4 |
| 13 | keynv | 3 |
| 14 | mcpcustoms | 2 |
| 15 | diplomat-agent-ts | 1 |
| 16 | mcp-security-scanner | 1 |
Sponsored
Puter.js - The Backend for AI-Generated Apps
One-shot full-stack apps with your existing AI coding tool. Puter.js gives you Auth, Storage, DB, AI & more, with up to 90% fewer AI tokens than other backend platforms.
developer.puter.com